MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Everlaw
8 tools · footprint 12
1 high 7 low
Fyxer
6 tools · footprint 12
3 med 3 low
Krisp
6 tools · footprint 12
2 med 4 low
LatchBio
9 tools · footprint 12
2 med 7 low
Linear
21 tools · footprint 12
3 med 18 low
Microsoft Power BI
4 tools · footprint 12
1 high 3 low
Plaid
5 tools · footprint 12
1 med 4 low GLBA
Pylon
11 tools · footprint 12
3 med 8 low
SurveyMonkey
6 tools · footprint 12
2 med 4 low
Aurora MCP (Consilio)
4 tools · footprint 11
1 med 3 low
Google Sheets
3 tools · footprint 11
1 med 2 low
Harvey
5 tools · footprint 11
1 med 4 low
Honeycomb
10 tools · footprint 11
1 med 9 low
Intercom
13 tools · footprint 11
2 med 11 low
Microsoft Word (Work IQ)
4 tools · footprint 11
1 med 3 low
tl;dv
4 tools · footprint 11
1 med 3 low
‹ PrevPage 12 of 19Next ›
NetlifyDocs ↗
2 critical 4 high 4 med 13 low · 23 tools · 3 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (6 of 23)

netlify.manage-env-vars critical conf mediumhuman approval
Reads out and rewrites a site's environment variables, which routinely hold API keys, database URLs and third-party credentials for the running production build.
netlify.manage-form-submissions critical conf mediumhuman approval
Reads every visitor-submitted form record for a site — names, emails, free-text messages — and can permanently delete those submissions with no undo path.
netlify.update-visitor-access-controls high conf mediumOBO
Changes who can view a deployed site; removing password protection or the SSO team-login requirement exposes a previously gated site to the open internet.
netlify.deploy-site high conf mediumhuman approval
Builds and publishes code to a live Netlify site in one call, putting unreviewed changes in front of real traffic without passing through any human release gate.
netlify.import-claude-design-from-url high conf mediumOBO
Publishes an externally fetched HTML bundle to a Netlify site; when an existing site is targeted the imported content replaces what visitors currently see.
netlify.change-extension-installation high conf mediumOBO
Installs or removes a third-party extension across a team or site, granting or revoking that vendor's access to build pipelines and project data.
All other tools (17)
netlify.create-new-project medium conf mediumaudit
Provisions a new publicly addressable site under a team, consuming plan entitlements and adding an internet-facing property to the org's footprint.
netlify.get-deploy low conf mediumallow
Returns metadata and status for one deploy, including its build state and commit reference.
netlify.get-deploy-for-site low conf mediumallow
Returns deploy details scoped to one site, used to inspect what is currently published.
netlify.get-design-import-job-status low conf mediumallow
Reports progress and outcome of an in-flight design import job.
netlify.get-extensions low conf mediumallow
Lists the extensions available to a team and which are installed.
netlify.get-forms-for-project low conf mediumallow
Lists the form definitions configured on a site along with their submission counts.
netlify.get-full-extension-details low conf mediumallow
Returns the full configuration of one installed extension, revealing how a third-party integration is wired into the team.
netlify.get-netlify-coding-context low conf mediumallow
Returns Netlify's own coding guidance for a creation type; no customer data is read or changed.
netlify.get-project low conf mediumallow
Returns configuration and status for one site, including its domains and build settings.
netlify.get-projects low conf mediumallow
Enumerates the sites visible to the authenticated account, exposing the org's full web-property inventory.
netlify.get-team low conf mediumallow
Returns one team's details, including its slug, plan and account identifiers.
netlify.get-teams low conf mediumallow
Enumerates the teams the caller belongs to, exposing the org's account structure.
netlify.get-user low conf mediumallow
Returns the calling user's own Netlify account profile, including name, email and account identifiers.
netlify.initialize-database medium conf mediumaudit
Sets up the Netlify database extension for a project, provisioning a new data store and its connection configuration.
netlify.netlify-coding-rules low conf mediumallow
Returns Netlify's documented coding rules over the local stdio transport; no customer data is read or changed.
netlify.update-forms medium conf mediumaudit
Turns form capture on or off for a site; disabling it silently drops incoming lead and contact submissions, enabling it starts collecting visitor-supplied personal data.
netlify.update-project-name medium conf mediumaudit
Renames a site, which also changes its default netlify.app subdomain and breaks any inbound links or integrations bound to the old name.